Ship 4-digit OTP with rate-limit attempts, Tehran-safe expiry/rass math, larger JSON body limit for check images, and safer order pricing/status guards. Include rebuilt dist for prebuilt deploy.
Co-authored-by: Cursor <cursoragent@cursor.com>
Allow Nest prefix server/api and overlay dist from git onto the deploy bundle so proxy paths match without a full retar.
Co-authored-by: Cursor <cursoragent@cursor.com>
Alpine musl is incompatible with host-built Prisma engines; use bookworm-slim and allow updating entrypoint without repacking the bundle.
Co-authored-by: Cursor <cursoragent@cursor.com>
npm ci ignores registry config when lockfile points at registry.npmjs.org; rewrite resolved URLs to mirror.iranserver.com before install.
Co-authored-by: Cursor <cursoragent@cursor.com>
ARG after FROM was empty without an explicit default, so npm ci hit the slow/blocked official registry.
Co-authored-by: Cursor <cursoragent@cursor.com>
Drop apk openssl (node alpine already has it) and use npmmirror by default so Iranian servers can build without Alpine TLS failures.
Co-authored-by: Cursor <cursoragent@cursor.com>
Provide backend for admin and user apps with Postgres, migrations, seed data, and docker-compose for LiteSpeed reverse-proxy deployment.
Co-authored-by: Cursor <cursoragent@cursor.com>